Privacy Policy
Last updated 20 October 2026
Relmock keeps what it needs to run your account and your mock APIs, nothing more. There are no ads, no analytics and no tracking cookies. You can export everything or delete your account at any time from the Account page.
Who we are
Relmock (relmock.com and app.relmock.com) is run by [operator name], [country]. For anything about your data, write to [contact email].
What we store
Your account
- Your email address and, if you give one, your name.
- Your password, stored only as a one-way hash. If you sign in with Google, we receive your email, name and profile picture from Google instead and store no password.
- When the account was created, when you confirmed your email, and which sign-in method you use.
Your projects
- Everything you build: tables, fields, relations, records, custom endpoints, project settings and public docs settings.
- API keys for your mocks, stored only as hashes.
- Your conversations with the AI schema assistant and the values it writes for your tables.
Requests to your mock APIs
The Requests page shows each call made to your mock: method, path, query, request headers and body, response body, status and timing. Request headers can include the caller's IP address and browser details. Values whose name looks like a credential (for example Authorization, password or token) are replaced with [REDACTED] before they are stored.
Please don't send real personal data or real secrets to a mock. Relmock is built for test data.
In your browser
The app keeps your sign-in token and your theme choice in your browser's local storage. We set no advertising or analytics cookies. The landing page uses no cookies or trackers at all.
Technical logs
Our servers keep short-lived technical logs and error reports (time, address requested, status, error details) to keep the service running and secure.
Why we use it
- To provide the service you signed up for: your account, your projects and your mock APIs (performance of a contract).
- To send emails you need: confirming your address and resetting your password. We send no marketing email.
- To keep the service secure and working: rate limits, abuse prevention, debugging (legitimate interest).
Who processes it for us
We don't sell or share your data. These providers process it only to run Relmock:
- Hosting: our servers and database run on a virtual server from Contabo.
- Email delivery: an email provider sends confirmation and password reset emails.
- Google: only if you choose Google sign-in. Google's script loads on the sign-in page.
- AI provider: only when you use AI features, the text you type and your table definitions are sent to the AI provider we use to generate the answer.
- Backup storage: nightly copies of the database are kept with an object storage provider.
- Error reporting: error details may be sent to an error-tracking service.
Some of these providers may process data outside your country. Where the law requires it, we rely on their standard contractual safeguards.
How long we keep it
- Account and projects: until you delete them.
- Mock request logs: at most 7 days, and only the newest 1,000 per project.
- Email links: confirmation links expire after 24 hours, password reset links after 30 minutes.
- Backups: daily copies for 14 days and weekly copies for 8 weeks, then overwritten. Deleted data disappears from backups on that schedule.
Your choices and rights
- Export: download everything stored for your account as one JSON file from the Account page.
- Delete: delete your account from the Account page. Your projects, records, logs and AI data are removed at once.
- Correct: change your name on the Account page, or write to us.
- Depending on where you live (for example under the GDPR in the EU and UK), you may also have the right to access, restrict or object to processing, and to complain to your data protection authority. Write to [contact email] and we will answer within 30 days.
Security
Connections use HTTPS. Passwords and API keys are stored as hashes. Each account's data is separated in the database by row-level security, so one account cannot read another's. No system is perfectly secure, so please use a unique password.
Children
Relmock is a developer tool and is not meant for anyone under 16.
Changes
If this policy changes in a way that matters, we will update the date above and tell signed-in users in the app or by email before the change takes effect.